agency-mobile-release-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no malicious code, obfuscation, or unauthorized data access patterns. It explicitly instructs against storing credentials in insecure locations like Git or local files, recommending encrypted shared stores (e.g., fastlane match) instead.- [PROMPT_INJECTION]: The skill demonstrates a workflow that reads external data (
CHANGELOG_LATEST.md) to populate store metadata. While a standard development practice, this constitutes an ingestion point for external content. - Ingestion points:
File.read("../CHANGELOG_LATEST.md")inSKILL.md. - Boundary markers: The content is used directly without delimiters or "ignore" instructions.
- Capability inventory: The skill uses
fastlaneto build and upload artifacts/metadata to mobile app stores. - Sanitization: No content sanitization is implemented for the changelog data.
Audit Metadata